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! 
OUTLINE OF ACTIONS TO INITIATE REGULATORY CHANGES FOR AGENCY 
IMPLEMENTATION OF NATIONAL SECURITY DECISION DIRECTIVE 84 (NSDD-84) i 


THE FOLLOWING OUTLINE IS STRUCTURED FOR EACH AGENCY OF THE EXECUTIVE BRANCH THAT EMPLOYS PERSONS WHO REQUIRE ACCESS TO CLASSIFIED INFORMATION, tho 
INCLUDE, WHENEVER REQUIRED BY THE POSITION, ACCESS TO SENSITIVE COMPARTMENTED INFORMATION. (SCI). AGENCIES THAT DO NOT HAVE ORIGINAL CLASSIFICA4 
TION AUTHORITY OR DO NOT EMPLOY PERSONS WITH ACCESS TO SCI SHOULD DISREGARD INAPPLICABLE SECTIONS. 
MAJOR REQUIREMENTS OF NSDD-84 SAMPLE LANGUAGE OR MECHANISM TO IMPLEMENT 

IT. SECURITY REGULATIONS 


; 
! 
| 
! 


A. Requirement to sign nondisclosure Any person whose position requires access to classified information 


agreement form(s) for access to must execute SF (#) {standardized form being developed by the 
classified information Director, Information Security Oversight Office, IS00). é 


[Optional provision that an agency head may choose to require of all persons 
who have access to classified information: Any person whose position requires access 
to classified information must also execute SF_ (#) (standardized 

form being developed by the Director, IS00, as a supplement to the 

standard form noted above, which adds a prepublication review requirement) ]. 


B, Requirement to sign nondisclosure Any person whose position requires access to Sensitive Compartimented 
agreement form for access to SCI Information (SCI) must execute SF_ (#) (standardized form being 


developed by the Director, 1S00, will include a provision for prepublication 
review to assure deletion of SCI and other classified information), 
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MAJOR REQUIREMENTS OF NSDD-84 


1. Establish a Prepublication 
Review Authority 


2. Establish prepublication review 
procedures 


C. Media contacts 


SAMPLE LANGUAGE OR MECHANISM TO IMPLEMENT . 


Implementing regulations should describe the composition of a prepublication 
review authority (individual or board). : . 


The regulations should include: 


(a) procedures for submitting materials for review; 


(b) processing guidelines, including time frames 
(substantive replies will be required within 
30 working days); 


(c) procedures for referrals to other agencies with 
subject matter authority or interest; and- 


(d) provisions for an optional administrative appeal process. 


The relevant agency regulation should establish procedures to govern 
contacts between media representatives and agency personnel with access 

to classified information, in order to minimize the opportunity for the 
negligent or deliberate unauthorized disclosure of classified information. 
The specific regulatory means are within an agency head's discretion. 
Examples might include such procedures as clearing media contacts through 

a designated office or individual; responding to media inquiries only 
through a designated office or individual; or requiring the presence of more 
than one person during briefings or interviews. 
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MAJOR REQUIREMENTS OF NSDD-84 


D. Procedures for reporting and 
investigating unauthorized 
disclosures 
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SAMPLE LANGUAGE OR MECHANISM TO IMPLEMENT 


The regulations should establish internal procedures for responding to 
suspected or actual unauthorized disclosures of classified information, 
to include: 


(a) 


(b) 
(c) 


(d) 


Responsibilities and procedures for reporting unauthorized 
disclosures; : 


procedures 


procedures 
Department 


procedures 


EXAMPLE: The ( 


for conducting preliminary investigations; 


for reporting unauthorized disclosures to the 
of Justice and the ISO0, and; 


to conduct polygraph examinations. 


) may require any employee to 


agency head 


submit to a polygraph examination, when appropriate, in the 
course of investigations of unauthorized disclosures of 
classified information. The polygraph examination will be 
limited to the circumstances of the unauthorized disclosure, 
and its results will not be relied upon to the exclusion of 
other information obtained during the investigation. Failure 
to cooperate with a polygraph examination will subject an 
employee to administrative sanction, 
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MAJOR REQUIREMENTS OF NSDD-84 © SAMPLE LANGUAGE OR MECHANISM TO IMPLEMENT 


Sanctions and penalties The regulation should include disciplinary actions or penalties 
that may be imposed upon agency personnel who knowingly, willfully, 
or negligently disclose classified information to unauthorized 
persons, or upon personnel who refuse to cooperate with an investigation 
of an unauthorized disclosure, including a polygraph examination. 
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